WO2016206041A1

WO2016206041A1 - Terminal data protection method and apparatus

Info

Publication number: WO2016206041A1
Application number: PCT/CN2015/082337
Authority: WO
Inventors: 黎广
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-06-25
Filing date: 2015-06-25
Publication date: 2016-12-29

Abstract

Disclosed are a terminal data protection method and apparatus. The method comprises: a terminal acquires a human eye image in a current environment by using an imaging apparatus; obtain human eye parsing information comprising iris feature information and eyeball sight information according to the human eye image; perform detection on the human eye parsing information according to a pre-defined detection rule, and determine whether the terminal has a data leakage risk; and if the terminal has a data leakage risk, the terminal executes a preset risk elimination instruction. By means of the present invention, the sight of an unauthorized user in a current environment can be identified, thereby preventing terminal data from being peeped, and effectively protecting the security of the terminal data.

Description

Terminal data protection method and device

Technical field

The present invention relates to the field of mobile terminals, and in particular, to a data protection method and apparatus for a terminal.

Background technique

The functions of mobile terminals represented by smart phones are becoming more and more abundant. In addition to the traditional communication functions, they also have functions such as social and online payment. When people use mobile terminals in public places such as subways and shopping malls, the privacy information of the users on the mobile terminals is easily leaked by the peek of the person next to them, and the privacy information of the users on the terminals has a large security risk.

At present, in order to prevent private information on the mobile terminal from being leaked in a public place, one method is to configure a special screen on the mobile terminal, and when entering a public place, the anti-peeping function is turned on, and at this time, if the line of sight and the mobile terminal are If the angle of the screen exceeds a certain angle, the content on the screen will not be visible. To a certain extent, when the mobile terminal is used in public, the screen content will not be seen by the surrounding people; another method is to shoot the mobile terminal. The image of the current environment is subjected to face recognition according to the image of the current environment. If a strange face is found, the user is reminded to pay attention to the protection of personal privacy information. However, the above two technologies have obvious deficiencies. The first method requires a mobile terminal to configure a special screen, but most mobile terminals have not used such a screen, and this technology is oriented in the front view. The peek has no effect; the second method can only identify strange faces in the image of the current environment of the shooting, and cannot accurately identify whether the stranger is watching the mobile terminal, and the images taken in public are usually Can identify more strange faces, even if the strangers around do not look at the mobile terminal, there will still be a protection reminder, which makes the second method has a higher false positive rate, which affects the user's smoothness to the mobile terminal. Operational use.

Summary of the invention

The embodiment of the invention provides a data protection method and device for a terminal, which can effectively protect the security of the terminal data.

An aspect of the present invention provides a data protection method for a terminal, including:

The terminal acquires a human eye image of the current environment through the imaging device;

Obtaining human eye analysis information including iris feature information and eyeball line of sight information according to the human eye image;

Detecting the human eye analysis information according to a predefined detection rule, and determining whether the terminal has a data leakage risk;

If there is a risk of the data leakage, the terminal executes a preset risk elimination instruction.

Another aspect of the present invention provides a data protection device for a terminal, including:

An imaging module, configured to acquire an image of a human eye of a current environment through an imaging device of the terminal;

a parsing module, configured to obtain human eye analysis information including iris feature information and eyeball line of sight information according to the human eye image;

a risk detection module, configured to detect the human eye analysis information according to a predefined detection rule, and determine whether the terminal has a data leakage risk;

The risk elimination module is configured to execute a preset risk elimination instruction on the terminal if the data leakage risk exists.

Embodiments of the present invention have the following beneficial effects:

In the embodiment of the present invention, the terminal acquires the human eye image of the current environment through the imaging device, obtains human eye analysis information including the iris feature information and the eyeball line of sight information according to the human eye image, and detects the human eye analysis information according to the predefined detection rule. Determine whether the terminal has a risk of data leakage. If there is a risk of data leakage, execute the preset risk elimination instruction. The embodiment of the invention can identify the line of sight of the unauthorized user in the current environment, thereby preventing the terminal data from being sneaked, and effectively protecting the security of the terminal data.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

FIG. 1 is a flowchart of a data protection method for a terminal according to an embodiment of the present invention;

2 is a flowchart of another method for data protection of a terminal according to an embodiment of the present invention;

FIG. 3 is a flowchart of still another method for data protection of a terminal according to an embodiment of the present disclosure;

4 is a schematic structural diagram of a data protection device of a terminal according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of an embodiment of a parsing module according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of an embodiment of a detection module according to an embodiment of the present disclosure;

FIG. 7 is a schematic structural diagram of an embodiment of a scenario determining submodule according to an embodiment of the present disclosure;

FIG. 8 is a schematic structural diagram of an embodiment of a risk determination sub-module according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In the embodiment of the present invention, the terminal may be any one of a smart phone, a tablet computer, a PC (Personal Computer), an e-reader, an MP4 player, and the like. Preferably, the terminal has a function of acquiring an image of a human eye. .

The data protection method of the terminal according to the embodiment of the present invention will be described in detail below with reference to the accompanying drawings.

FIG. 1 is a flowchart of a data protection method for a terminal according to an embodiment of the present invention. The method may include steps S101-S104.

S101. The terminal acquires a human eye image of a current environment by using an imaging device.

As an optional implementation manner, after the terminal is woken up, the terminal acquires a human eye image of the current environment through the imaging device. The imaging device may be a camera built in the terminal or a human eye detector, or may be a non-built-in device that can be acquired by the terminal, such as a smart camera connected to the terminal via Wi-Fi.

As an optional implementation manner, the terminal may first acquire an image of the current environment by using an imaging device, and then perform pre-processing on the image, where the pre-processing may include brightness adjustment, denoising, etc., and the image is improved by preprocessing. quality. The pre-processed image is then subjected to face recognition, from which one or more face regions are identified, and then one or more face regions are identified and segmented to obtain one or more human eye images.

S102. Obtain human eye analysis information including iris feature information and eyeball line of sight information according to the human eye image.

As an optional implementation manner, the human eye image obtained in step S101 is further analyzed, and human eye analysis information is extracted, wherein the human eye analysis information includes iris feature information and eyeball line of sight information, wherein the iris feature information It can be used to identify the identity of the person corresponding to the human eye image, and the eyeball line of sight information can be used to determine whether the line of sight of the corresponding person falls on the current terminal screen. The specific extraction of the human eye analysis information may include the following steps: First, the human eye image is segmented into one or more eye images, and each of the eye images is a human eye. Image; secondly, performing an iris recognition algorithm on each of the eye images to obtain an iris feature value of the image of the eye; and again, performing a line-of-sight direction detection algorithm on each of the eye images to obtain the image The line-of-sight deflection value of the image of the eye; finally, the human eye analysis information including the iris feature information and the eyeball line of sight information is obtained according to the iris feature value and the line-of-sight deflection value of all the eye images.

S103. Detect the human eye analysis information according to a predefined detection rule, and determine whether the terminal has a data leakage risk.

As an optional implementation manner, after obtaining the human eye analysis information, determining whether the terminal is in a preset data protection scenario according to a preset scene recognition rule. The preset scene recognition rule herein may include multiple implementation manners, such as when a button on the terminal is pressed, or a specific application in the terminal is clicked to cause the terminal to receive a running instruction, the instruction indication The terminal is forced to enter the preset data protection scenario. Further, the terminal can obtain the current geographical location information. If the current geographic location information is displayed in a public place such as a subway, a shopping mall, or a road, the terminal automatically enters a preset data protection scenario. Further, the terminal may determine whether it is in an outgoing time period according to the current time. For example, if the user sets Monday to be an outgoing time period, when the calendar time of the terminal is Monday, the terminal automatically enters a preset data protection scenario.

Further optionally, the terminal may first analyze the iris feature information to determine whether the terminal is In a preset data protection scenario. If the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold, and the terminal receives the preset enable command, it is determined that the terminal is in a preset data protection scenario. The preset authorized iris feature library is a pre-stored iris feature value of the authorized user. When the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature library is less than a preset threshold, it means that the currently detected iris The feature information has the iris feature value of the unauthorized user. The user's current environment has detectable strangers. At this time, the terminal can pop up a prompt message such as "Detecting strangers near you, your information on the machine may be affected. To the leak, it is recommended that you enter the data protection scene mode. If the user clicks the confirmation button, the terminal receives the preset activation command, and the terminal enters the preset data protection scenario; if the user confirms that it is not necessary to enter the data protection scenario, for example The user can choose not to enter the preset data protection scene when sharing the video on the terminal with the friend.

As an optional implementation manner, if the terminal is in a preset data protection scenario, determining whether the terminal has a data leakage risk according to the human eye analysis information. If the matching degree of all the iris feature values in the iris feature information and the preset authorized iris feature database is not less than a preset threshold, it may be considered that there is no unauthorized user in the current environment detectable range, and there is no suspicious voyeur. Determining that the terminal has no data leakage risk; if the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold, and generating the iris image value of the eye image The line of sight deflection value is not within the preset deflection range. It can be considered that although there is an unauthorized user in the current environment, the line of sight of the unauthorized user does not fall on the terminal to be protected, that is, the terminal is not sneaked by an unauthorized user. Determining that the terminal does not have a risk of data leakage; if the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold, and generating the eye image of the iris feature value The line of sight deflection value is within a preset deflection range, and the current environment is considered to have not only an unauthorized user but also at least one unauthorized Eyes on household terminal to be protected, the terminal is in a state of being peeping, it is determined that there is the risk of leakage data terminal.

S104. If the data leakage risk exists, the terminal executes a preset risk elimination instruction.

As an optional implementation manner, the preset risk elimination instruction executed by the terminal may include a push instruction of a preset set of graphic and text information on the terminal, a screen to extinguish the terminal screen, or a screen control instruction for reducing the brightness of the terminal screen, at the terminal. Playing a preset voice file playback command and making the terminal body The motor control command that generates the regular vibration, by executing the preset risk elimination instruction, eliminates the risk of data leakage as much as possible, and achieves the purpose of protecting the data security of the terminal.

In the embodiment of the present invention, the terminal acquires a human eye image of the current environment through the imaging device, obtains human eye analysis information including iris feature information and eyeball line of sight information according to the human eye image, and performs human eye analysis information according to a predefined detection rule. The detection determines whether the terminal has a risk of data leakage. If there is a risk of data leakage, the preset risk elimination instruction is executed. The embodiment of the invention can identify the line of sight of the unauthorized user in the current environment, thereby preventing the terminal data from being sneaked, and effectively protecting the security of the terminal data.

FIG. 2 is a flowchart of another method for data protection of a terminal according to an embodiment of the present invention. The method may include steps S201-S208.

S201. The terminal acquires a human eye image of the current environment through the imaging device.

As an optional implementation manner, when the terminal is woken up by unlocking, or enters the unlocking interface of the terminal, the terminal acquires a human eye image of the current environment through the imaging device. The imaging device may be a camera built in the terminal or a human eye detector, or may be a non-built-in device that can be acquired by the terminal, such as a smart camera connected to the terminal via Wi-Fi. An example for reference is that the smartphone scans the current environment through the built-in human eye detector to obtain a human eye image of the current environment.

As an optional implementation manner, the terminal may first acquire an image of the current environment by using an imaging device, and then perform pre-processing on the image, where the pre-processing may include brightness adjustment, denoising, etc., and the image is improved by preprocessing. quality. The pre-processed image is then subjected to face recognition, from which one or more face regions are identified, and then one or more face regions are identified and segmented to obtain one or more human eye images. For example, the smart phone takes a picture of the current environment through the built-in camera, and obtains image A. Image A is preprocessed and converted into image B, and face B is image-recognized, and a total of three face regions are obtained, namely F1, F2 and F3, the three face regions are separately identified and segmented, and three human eye images are obtained, namely E1, E2 and E3.

S202. The human eye image is segmented into one or more eye images, and each of the eye images is an image including one human eye.

As an optional implementation, it is possible to photograph the face because of the shooting angle. It is lateral, and each human eye image may contain one human eye or two human eyes. Here, an image of the eye containing only one human eye is segmented from each human eye image. For example, the above-mentioned three human eye images in step S201 are segmented, and SE1, SE2, and SE3, SE4, and SE5 are separated from E1, E2, and E3, and the SE1 to SE5 are all eyes including only one human eye. Part image.

S203. Perform an iris recognition algorithm on each of the eye images to obtain an iris feature value of the image of the eye.

As an optional implementation manner, the obtained eye images are analyzed one by one, and the iris feature values are extracted therefrom. The eye image includes an image detail of a complete human eye, and an iris recognition algorithm is performed on each eye image, and the iris recognition algorithm may be executed on a general-purpose central processing unit of the terminal, or may be performed on the terminal. A dedicated iris recognition chip is implemented. All eye images are processed by the iris recognition algorithm to obtain one or more iris feature values, and each iris feature value is a detailed feature of spots, filaments, crowns, stripes, crypts, etc. interlaced in an iris. Mathematical description. Taking the eye image obtained in step S202 as an example, SE1 to SE5 are processed by the iris recognition algorithm to obtain corresponding iris feature values ht1 to ht5.

S204. Perform a line-of-sight direction detection algorithm on each of the eye images to obtain a line-of-sight deflection value of the image of the eye.

As an alternative embodiment, the eye image includes details of the eyeball, the cornea, the pupil, and the like in addition to the iris. Applying the existing line-of-sight direction detection algorithm, the line of sight direction of a complete eye image can be detected, and the line-of-sight deflection value of the eyeball and the terminal screen in each eye image is calculated by combining the three-dimensional imaging calculation model. It is an angle value, and the reference coordinate system used is a spatial three-dimensional coordinate system whose origin is the center of the visible area on the terminal screen. Taking the eye image obtained in step S202 as an example, SE1 to SE5 are processed by the line-of-sight direction detection algorithm to obtain corresponding line-of-sight deflection values sp1 to sp5.

S205. Obtain human eye analysis information including iris feature information and eyeball line of sight information according to the iris feature value and the line of sight deflection value of all the eye images.

As an alternative embodiment, all of the iris feature values and the line-of-sight deflection values obtained in steps S203 and S204 are combined as human eye analysis information. The human eye analysis information JX=(JX1, JX2, JX3, JX4, JX5), and the JX1 to JX5 are portions of the human eye analysis information corresponding to the eye images SE1 to SE5, wherein JX1=(ht1, sp1), and the rest can be deduced by analogy. .

S206, if the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold, and the terminal receives the preset enable command, determining that the terminal is preset. Data protection scenario.

As an optional implementation manner, the preset authorized iris feature library is composed of iris feature values of one or more authorized users, and the iris feature value in the iris feature information is matched with the authorized iris feature library. If there is one or more iris feature values in the iris feature information and the authorized iris feature library does not satisfy the matching condition, that is, the matching degree of the matching operation is less than the preset threshold, it is considered that the current environment has an unauthorized user, and the terminal may pop up a corresponding prompt. Information, asking the user if they need to enter a preset data protection scenario to further protect the data on the terminal. For example, the terminal can pop up a prompt message such as "Detecting strangers near you, your information on this machine may be leaked. It is recommended that you enter the data protection scene mode." If the user clicks the confirmation button, the terminal receives Go to the preset enable command and make sure to enter the preset data protection scene.

S207. If the terminal is in a preset data protection scenario, determine, according to the human eye analysis information, whether the terminal has a data leakage risk.

As an optional implementation manner, when the terminal is in a preset data protection scenario, the iris feature value in the iris feature information is matched with the preset authorized iris feature library one by one, if all the iris feature information The matching degree between the iris feature value and the preset authorized iris feature database is not less than a preset threshold. It can be considered that there is no unauthorized user in the current environment detectable range, and there is no suspicious voyeur, and the terminal is determined to have no data leakage risk. If the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature library is less than a preset threshold, and the line-of-sight deflection value of the eye image generating the iris feature value is not preset Within the deflection range, it can be considered that although there is an unauthorized user in the current environment, the line of sight of the unauthorized user does not fall on the terminal to be protected, that is, the terminal is not sneaked by the unauthorized user, and it is determined that the terminal does not have data leakage. Risk; if the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold And the line of sight deflection value of the eye image generating the iris feature value is within a preset deflection range, and it is considered that the current environment not only has an unauthorized user, but also the sight of at least one unauthorized user falls on the terminal to be protected. In the above, the terminal is in a state of being peeked, and it is determined that the terminal has a risk of data leakage. For example, in the human eye analysis information obtained in step S205, the matching operation result with the preset authorized iris feature database shows that JX4 and JX5 correspond to the smart phone. The result of the analysis of the eye image of the two eyes of the authorized user, and JX1, JX2 and JX3 are the result of the analysis of the eye image of the unauthorized user, and the line-of-sight deflection values sp1 and sp3 of JX1 and JX3 are not within the preset deflection range. When the line of sight deflection value sp2 of JX2 is within the preset deflection range, it can be confirmed that the eye in the eye image SE2 is looking at the terminal screen, and the terminal has a risk of data leakage.

S208. If the data leakage risk exists, the terminal executes a preset risk elimination instruction.

As an optional implementation manner, the preset risk elimination instruction executed by the terminal may include a push instruction of a preset set of graphic and text information on the terminal, a screen to extinguish the terminal screen, or a screen control instruction for reducing the brightness of the terminal screen, at the terminal. The play command for playing the preset voice file and the motor control command for causing the terminal body to generate regular vibrations can eliminate the risk of data leakage as much as possible by performing the preset risk elimination instruction, thereby achieving the purpose of protecting the data security of the terminal. . For example, when the eye in the eye image SE2 is recognized to be looking at the terminal screen, the terminal first executes a push command, pushes information on the screen to remind the user, and then executes a screen control command to extinguish the terminal screen.

In the embodiment of the present invention, the terminal acquires a human eye image of the current environment through the imaging device, and obtains human eye analysis information including iris feature information and eyeball line of sight information according to the human eye image, if the iris feature value in the iris feature information is The matching degree of the preset authorized iris feature library is less than the preset threshold, and the terminal receives the preset enable command, and determines that the terminal is in the preset data protection scenario. When the terminal is in the preset data protection scenario, The human eye analysis information determines whether the terminal has a data leakage risk, and if there is a data leakage risk, the preset risk elimination instruction is executed. The embodiment of the invention can identify the line of sight of the unauthorized user in the current environment, thereby preventing the terminal data from being sneaked, and effectively protecting the security of the terminal data.

FIG. 3 is a flowchart of still another method for data protection of a terminal according to an embodiment of the present invention. The method may include steps S301-S308.

S301. The terminal acquires a human eye image of a current environment by using an imaging device.

S302. The human eye image is segmented into one or more eye images, and each of the eye images is an image including one human eye.

S303. Perform an iris recognition algorithm on each of the eye images to obtain an iris feature value of the image of the eye.

S304. Perform a line-of-sight direction detection algorithm on each of the eye images to obtain the image of the eye. The line of sight deflection value of the image.

S305. Obtain human eye analysis information including iris feature information and eyeball line of sight information according to the iris feature value and the line of sight deflection value of all the eye images.

S306. If the terminal receives the preset mandatory enable command, determine that the terminal is in a preset data protection scenario.

S307. If the terminal is in a preset data protection scenario, determine, according to the human eye analysis information, whether the terminal has a data leakage risk.

S308. If the data leakage risk exists, the terminal executes a preset risk elimination instruction.

For the specific functions of the steps S301-S305 and S307-S308 in the embodiment of the present invention, refer to steps S201-S205 and S207-S208 of the method shown in FIG. 2, and details are not described herein. Step S206 is described in detail in step S206.

As an optional implementation manner, in step S306, when the terminal receives the preset forced enable command, for example, when a preset button on the terminal is pressed, or clicks on a specific one of the terminals The application causes the terminal to receive a running command, which instructs the terminal to forcibly enter a preset data protection scenario. Further, the terminal can obtain the current geographical location information. If the current geographic location is a public place such as a subway, a shopping mall, or a road, the terminal automatically enters a preset data protection scenario. Further, the terminal may determine whether it is in an outgoing time period according to the current time. For example, if the user sets Monday to be an outgoing time period, when the calendar time of the terminal is Monday, the terminal automatically enters a preset data protection scenario.

In the embodiment of the present invention, the terminal acquires the human eye image of the current environment through the imaging device, and obtains the human eye analysis information including the iris feature information and the eyeball line of sight information according to the human eye image, and if the terminal receives the preset forced activation command, Determining whether the terminal is in a preset data protection scenario. When the terminal is in a preset data protection scenario, determining whether the terminal has a data leakage risk according to the human eye analysis information, and if there is a data leakage risk, executing the preset Risk elimination instructions. The embodiment of the invention can identify the line of sight of the unauthorized user in the current environment, thereby preventing the terminal data from being sneaked, and effectively protecting the security of the terminal data.

FIG. 4 is a schematic structural diagram of a data protection apparatus for a terminal according to an embodiment of the present invention. The apparatus includes: an imaging module 401, a parsing module 402, a risk detecting module 403, and a risk. The module 404 is eliminated.

The imaging module 401 is configured to acquire an image of a human eye of a current environment by using an imaging device of the terminal.

The parsing module 402 is configured to obtain human eye analysis information including iris feature information and eyeball line of sight information according to the human eye image.

The risk detection module 403 is configured to detect the human eye analysis information according to a predefined detection rule, and determine whether the terminal has a data leakage risk.

The risk elimination module 404 is configured to execute a preset risk elimination instruction on the terminal if the data leakage risk exists.

The specific functions of the imaging module 401 to the risk elimination module 404 can be respectively referred to steps S101 to S104 shown in FIG. 1 , and details are not described herein.

As an optional implementation manner, a schematic structural diagram of the parsing module 402 is shown in FIG. 5. The parsing module 402 may include a splitting unit 4021, an iris recognizing unit 4022, a line of sight recognizing unit 4023, and an information combining unit 4024.

The dividing unit 4021 is configured to divide the human eye image into one or more eye images, and each of the eye images is an image including one human eye.

The iris recognition unit 4022 is configured to perform an iris recognition algorithm on each of the eye images to obtain an iris feature value of the image of the eye.

The line-of-sight identifying unit 4023 is configured to perform a line-of-sight direction detecting algorithm on each of the eye images to obtain a line-of-sight deflection value of the image of the eye.

The information combining unit 4024 is configured to obtain human eye analysis information including iris feature information and eyeball line of sight information according to the iris feature value and the line of sight deflection value of all the eye images, wherein the iris feature information includes all the eye images An iris feature value, the eyeball line of sight information comprising a line of sight deflection value for all of the eye images.

For the specific functions of the splitting unit 4021 to the information combining unit 4024, refer to steps S202 to S205 shown in FIG. 2, and details are not described herein.

As an optional implementation manner, a schematic structural diagram of the risk detection module 403 is shown in FIG. 6. The risk detection module 403 may include a scenario determination submodule 4031 and a risk determination submodule 4032.

The scene determining sub-module 4031 is configured to analyze the iris feature information according to a preset scene recognition rule to determine whether the terminal is in a preset data protection scenario.

As an optional implementation manner, a schematic diagram of the structure of the scene determining sub-module 4031 is as shown in FIG. 7. The scene determining sub-module 4031 may include a first scene determining unit 40311 and a second scene determining unit 40312.

The first scene determining unit 40311 is configured to determine, if the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold, and the terminal receives the preset enable command The terminal is in a preset data protection scenario.

The second scenario determining unit 40312 is configured to determine that the terminal is in a preset data protection scenario if the terminal receives the preset mandatory enable command.

The specific functions of the first scene determining unit 40311 and the second scene determining unit 40312 can be respectively referred to step S206 shown in FIG. 2 and step S306 shown in FIG. 3, and details are not described herein.

The risk determination sub-module 4032 is configured to determine, according to the human eye analysis information, whether the terminal has a data leakage risk if the terminal is in a preset data protection scenario.

As an optional implementation manner, the structure of the risk determination sub-module 4032 is as shown in FIG. 8. The risk determination sub-module 4032 may include a first determining unit 40321, a second determining unit 40322, and a third determining unit 40323.

The first determining unit 40321 is configured to determine that the terminal does not have a data leakage risk if the matching degree of all the iris feature values in the iris feature information and the preset authorized iris feature database is not less than a preset threshold.

The second determining unit 40322 is configured to: if the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold, and the image of the eye image that generates the iris feature value If the line of sight deflection value is not within the preset deflection range, it is determined that the terminal does not have a risk of data leakage.

The third determining unit 40323 is configured to: if the matching degree between the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold, and the image of the eye image that generates the iris feature value is If the line of sight deflection value is within a preset deflection range, it is determined that the terminal has a risk of data leakage.

For the specific functions of the risk determining sub-module 4032 and the first determining unit 40321, the second determining unit 40322, and the third determining unit 40423, refer to step S207 shown in FIG. 2, and details are not described herein.

One of ordinary skill in the art can understand that all or part of the process of implementing the foregoing embodiments can be completed by a computer program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, the flow of an embodiment of the methods as described above may be included. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The above is only the preferred embodiment of the present invention, and the scope of the present invention is not limited thereto, and thus equivalent changes made in the claims of the present invention are still within the scope of the present invention.

Claims

A data protection method for a terminal, the method comprising:

The terminal acquires a human eye image of the current environment through the imaging device;

Obtaining human eye analysis information including iris feature information and eyeball line of sight information according to the human eye image;

Detecting the human eye analysis information according to a predefined detection rule, and determining whether the terminal has a data leakage risk;

If there is a risk of the data leakage, the terminal executes a preset risk elimination instruction.
The method according to claim 1, wherein the obtaining the human eye analysis information including the iris feature information and the eyeball line of sight information according to the human eye image comprises:

Dividing the human eye image into one or more eye images, each of the eye images being an image containing one human eye;

Performing an iris recognition algorithm on each of the eye images to obtain an iris feature value of the image of the eye;

Performing a line-of-sight direction detection algorithm on each of the eye images to obtain a line-of-sight deflection value of the image of the eye;

Obtaining human eye analysis information including iris feature information and eyeball line of sight information according to iris characteristic values and line of sight deflection values of all of the eye images, wherein the iris feature information includes iris feature values of all of the eye images, The eyeball line of sight information includes line of sight deflection values for all of the eye images.
The method according to claim 2, wherein the detecting the human eye analysis information according to a predefined detection rule to determine whether the terminal has a data leakage risk comprises:

Determining, according to a preset scenario identification rule, whether the terminal is in a preset data protection scenario;

If the terminal is in a preset data protection scenario, determine whether the terminal has a data leakage risk according to the human eye analysis information.
The method of claim 3, wherein the determining whether the terminal is in a preset data protection scenario according to a preset scenario identification rule comprises:

If the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold, and the terminal receives the preset enable command, determining that the terminal is in preset data protection Scene; or

If the terminal receives the preset mandatory enable command, it is determined that the terminal is in a preset data protection scenario.
The method according to claim 4, wherein if the terminal is in a preset data protection scenario, determining whether the terminal has a data leakage risk according to the human eye analysis information comprises:

If the matching degree of all the iris feature values in the iris feature information and the preset authorized iris feature database is not less than a preset threshold, determining that the terminal does not have a data leakage risk;

If the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold, and the line-of-sight deflection value of the eye image generating the iris feature value is not at a preset deflection Within the scope, it is determined that the terminal does not have a risk of data leakage;

If the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold, and the line-of-sight deflection value of the eye image generating the iris feature value is at a preset deflection Within the scope, it is determined that the terminal has a risk of data leakage.
The method according to claim 5, wherein the terminal executes the preset risk elimination instruction if the data leakage risk exists, including:

The risk elimination instruction is configured to include pushing at least preset graphic information on the terminal, extinguishing the terminal screen, playing a preset voice file on the terminal, and generating at least the body vibration by the terminal. One.
A data protection device for a terminal, characterized in that the device comprises:

An imaging module, configured to acquire an image of a human eye of a current environment through an imaging device of the terminal;

An analysis module, configured to obtain, according to the human eye image, information including iris characteristics and an eyeball line of sight The human eye analyzes the information;

a risk detection module, configured to detect the human eye analysis information according to a predefined detection rule, and determine whether the terminal has a data leakage risk;

The risk elimination module is configured to execute a preset risk elimination instruction on the terminal if the data leakage risk exists.
The apparatus of claim 7, wherein the parsing module comprises:

a dividing unit, configured to divide the human eye image into one or more eye images, each of the eye images being an image including one human eye;

An iris recognition unit configured to perform an iris recognition algorithm on each of the eye images to obtain an iris feature value of the image of the eye;

a line-of-sight identifying unit configured to perform a line-of-sight direction detecting algorithm for each of the eye images to obtain a line-of-sight deflection value of the image of the eye group;

An information combining unit, configured to obtain human eye analysis information including iris feature information and eyeball line of sight information according to iris feature values and line of sight deflection values of all the eye images, wherein the iris feature information includes all of the eye images An iris feature value, the eyeball line of sight information comprising a line of sight deflection value for all of the eye images.
The device of claim 8 wherein said risk detection module comprises:

a scene determination sub-module, configured to analyze the iris feature information according to a preset scene recognition rule, to determine whether the terminal is in a preset data protection scenario;

The risk determination sub-module is configured to determine, according to the human eye analysis information, whether the terminal has a data leakage risk if the terminal is in a preset data protection scenario.
The device according to claim 9, wherein the scene determination sub-module comprises:

a first scene determining unit, configured to determine, if the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold, and the terminal receives the preset enable command The terminal is in a preset data protection scenario;

a second scene determining unit, configured to: if the terminal receives a preset forced enable command, Determining that the terminal is in a preset data protection scenario.
The device of claim 10, wherein the risk determination sub-module comprises:

a first determining unit, configured to determine that the terminal does not have a data leakage risk if the matching degree of all the iris feature values in the iris feature information and the preset authorized iris feature database is not less than a preset threshold;

a second determining unit, configured to: if the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold, and generate the line of sight of the eye image of the iris feature value If the deflection value is not within the preset deflection range, it is determined that the terminal does not have a data leakage risk;

a third determining unit, configured to: if the matching degree of the iris feature value in the iris feature information and the preset authorized iris feature database is less than a preset threshold, and generate the line of sight of the eye image of the iris feature value If the deflection value is within a preset deflection range, it is determined that the terminal has a risk of data leakage.
The device according to claim 11, wherein the risk elimination instruction is configured to: push preset graphic information on the terminal, extinguish the terminal screen, and play a preset voice on the terminal. The document and the terminal generate at least one of body vibrations.